cf_rds.json

{
  "Outputs": {
    "RDSDatabaseConfig": {
      "Description": "Properties associated with the RDS database instance",
      "Value": {
	"Fn::Join": [
	  ",",
	  [
	    {
	      "Fn::GetAtt": [
		"RDSDatabase",
		"Endpoint.Address"
	      ]
	    },
	    {
	      "Fn::GetAtt": [
		"RDSDatabase",
		"Endpoint.Port"
	      ]
	    },

	    { "Ref": "DBName" },
	    { "Ref": "DBUser" },
	    { "Ref": "DBPassword" }
	  ]
	]
      }
    },

    "RDSPassSecurityGroup": {
      "Description": "Security group assign to ec2 instance that need access to rds instance",
      "Value": {
	"Ref": "RDSPassSecurityGroup"
      }
    }
  },

  "Parameters": {
    "DBUser": {
      "Default": "admin",
      "NoEcho": "true",
      "Description": "The name of master user for the client DB Instance.",
      "Type": "String",
      "ConstraintDescription": "must begin with a letter and contain only alphanumeric characters"
    },
    "DBName": {
      "Default": "mydb",
      "NoEcho": "true",
      "Description": "The DB Name of the RDS instance",
      "Type": "String",
      "ConstraintDescription": "must contain only alphanumeric characters"
    },
    "DBPassword": {
      "NoEcho": "true",
      "Description": "The master password for the DB instance.",
      "Type": "String",
      "ConstraintDescription": "must contain only alphanumeric characters"
    }
  },

  "Resources": {
    "RDSDBSecurityGroup": {
      "Type": "AWS::RDS::DBSecurityGroup",
      "Properties": {
	"GroupDescription": "Enable database access to Beanstalk application",
	"DBSecurityGroupIngress": {
	  "EC2SecurityGroupName": {
	    "Ref": "RDSPassSecurityGroup"
	  }
	}
      }
    },

    "RDSDatabase": {
      "Type": "AWS::RDS::DBInstance",
      "DeletionPolicy": "Delete",
      "Properties": {
	"MasterUsername": {
	  "Ref": "DBUser"
	},
	"DBSecurityGroups": [
	  {
	    "Ref": "RDSDBSecurityGroup"
	  }
	],
	"DBInstanceClass": "db.r5.large",
	"AllocatedStorage": "5",
	"EngineVersion": "13.4",
	"DBName": {
	  "Ref": "DBName"
	},
	"MasterUserPassword": {
	  "Ref": "DBPassword"
	},
	"Engine": "postgres"
      }
    },

    "RDSPassSecurityGroup": {
      "Type": "AWS::EC2::SecurityGroup",
      "Properties": {
	"GroupDescription": "SecurityGroup access RDS database."
      }
    }
  }
}